@dxos/echo-pipeline 0.3.11-main.cc2fe2c → 0.3.11-main.cf49a01

package/dist/lib/node/{chunk-GJQNRSA3.cjs → chunk-WGNVVL2H.cjs}

@@ -26,8 +26,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var chunk_GJQNRSA3_exports = {};
-__export(chunk_GJQNRSA3_exports, {
+var chunk_WGNVVL2H_exports = {};
+__export(chunk_WGNVVL2H_exports, {
   AuthExtension: () => AuthExtension,
   AuthStatus: () => AuthStatus,
   AutomergeHost: () => AutomergeHost,
@@ -54,7 +54,7 @@ __export(chunk_GJQNRSA3_exports, {
   startAfter: () => startAfter,
   valueEncoding: () => valueEncoding
 });
-module.exports = __toCommonJS(chunk_GJQNRSA3_exports);
+module.exports = __toCommonJS(chunk_WGNVVL2H_exports);
 var import_hypercore = require("@dxos/hypercore");
 var import_protocols = require("@dxos/protocols");
 var import_invariant = require("@dxos/invariant");
@@ -147,10 +147,12 @@ var import_keys7 = require("@dxos/keys");
 var import_log12 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
 var import_util9 = require("@dxos/util");
+var import_async10 = require("@dxos/async");
 var import_automerge_repo = require("@dxos/automerge/automerge-repo");
 var import_automerge_repo_storage_indexeddb = require("@dxos/automerge/automerge-repo-storage-indexeddb");
 var import_codec_protobuf2 = require("@dxos/codec-protobuf");
 var import_invariant10 = require("@dxos/invariant");
+var import_keys8 = require("@dxos/keys");
 var import_log13 = require("@dxos/log");
 var import_random_access_storage = require("@dxos/random-access-storage");
 var import_teleport_extension_automerge_replicator = require("@dxos/teleport-extension-automerge-replicator");
@@ -2700,7 +2702,7 @@ var SpaceManager = class {
       ...this._spaces.values()
     ].map((space) => space.close()));
   }
-  async constructSpace({ metadata, swarmIdentity, onNetworkConnection, onAuthFailure, memberKey }) {
+  async constructSpace({ metadata, swarmIdentity, onAuthorizedConnection, onAuthFailure, memberKey }) {
     import_log12.log.trace("dxos.echo.space-manager.construct-space", import_protocols7.trace.begin({
       id: this._instanceId
     }), {
@@ -2723,7 +2725,7 @@ var SpaceManager = class {
       topic: spaceKey,
       swarmIdentity,
       networkManager: this._networkManager,
-      onSessionAuth: onNetworkConnection,
+      onSessionAuth: onAuthorizedConnection,
       onAuthFailure,
       blobStore: this._blobStore
     });
@@ -2762,17 +2764,92 @@ SpaceManager = _ts_decorate8([
 var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
 var AutomergeHost = class {
   constructor(storageDirectory) {
+    this._authorizedDevices = new import_util10.ComplexMap(import_keys8.PublicKey.hash);
     this._meshNetwork = new MeshNetworkAdapter();
     this._clientNetwork = new LocalHostNetworkAdapter();
     this._storage = storageDirectory.type === import_random_access_storage.StorageType.IDB ? new import_automerge_repo_storage_indexeddb.IndexedDBStorageAdapter(storageDirectory.path, "data") : new AutomergeStorageAdapter(storageDirectory);
     this._repo = new import_automerge_repo.Repo({
+      peerId: `host-${import_keys8.PublicKey.random().toHex()}`,
       network: [
         this._clientNetwork,
         this._meshNetwork
       ],
       storage: this._storage,
       // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-      sharePolicy: async (peerId, documentId) => true
+      // Hosts, running in the worker, don't share documents unless requested by other peers.
+      sharePolicy: async (peerId, documentId) => {
+        if (peerId.startsWith("client-")) {
+          return true;
+        }
+        if (!documentId) {
+          return false;
+        }
+        const doc = this._repo.handles[documentId]?.docSync();
+        if (!doc) {
+          (0, import_log13.log)("doc not found for share policy check", {
+            peerId,
+            documentId
+          }, {
+            F: __dxlog_file14,
+            L: 65,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+        try {
+          if (!doc.experimental_spaceKey) {
+            import_log13.log.warn("space key not found for share policy check", {
+              peerId,
+              documentId
+            }, {
+              F: __dxlog_file14,
+              L: 71,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const spaceKey = import_keys8.PublicKey.from(doc.experimental_spaceKey);
+          const authorizedDevices = this._authorizedDevices.get(spaceKey);
+          const deviceKeyHex = this.repo.peerMetadataByPeerId[peerId]?.dxos_deviceKey;
+          if (!deviceKeyHex) {
+            import_log13.log.warn("device key not found for share policy check", {
+              peerId,
+              documentId
+            }, {
+              F: __dxlog_file14,
+              L: 81,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const deviceKey = import_keys8.PublicKey.from(deviceKeyHex);
+          const isAuthorized = authorizedDevices?.has(deviceKey) ?? false;
+          import_log13.log.info("share policy check", {
+            peerId,
+            documentId,
+            deviceKey,
+            spaceKey,
+            isAuthorized
+          }, {
+            F: __dxlog_file14,
+            L: 87,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return isAuthorized;
+        } catch (err) {
+          import_log13.log.catch(err, void 0, {
+            F: __dxlog_file14,
+            L: 90,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+      }
     });
     this._clientNetwork.ready();
     this._meshNetwork.ready();
@@ -2781,6 +2858,7 @@ var AutomergeHost = class {
     return this._repo;
   }
   async close() {
+    this._storage instanceof AutomergeStorageAdapter && await this._storage.close();
     await this._clientNetwork.close();
   }
   //
@@ -2792,7 +2870,7 @@ var AutomergeHost = class {
   sendSyncMessage(request) {
     return this._clientNetwork.sendSyncMessage(request);
   }
-  getHostInfo() {
+  async getHostInfo() {
     return this._clientNetwork.getHostInfo();
   }
   //
@@ -2801,11 +2879,15 @@ var AutomergeHost = class {
   createExtension() {
     return this._meshNetwork.createExtension();
   }
+  authorizeDevice(spaceKey, deviceKey) {
+    (0, import_util10.defaultMap)(this._authorizedDevices, spaceKey, () => new import_util10.ComplexSet(import_keys8.PublicKey.hash)).add(deviceKey);
+  }
 };
 var LocalHostNetworkAdapter = class extends import_automerge_repo.NetworkAdapter {
   constructor() {
     super(...arguments);
     this._peers = /* @__PURE__ */ new Map();
+    this._connected = new import_async10.Trigger();
   }
   /**
   * Emits `ready` event. That signals to `Repo` that it can start using the adapter.
@@ -2817,12 +2899,13 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo.NetworkAdapter
   }
   connect(peerId) {
     this.peerId = peerId;
+    this._connected.wake();
   }
   send(message) {
     const peer = this._peers.get(message.targetId);
     (0, import_invariant10.invariant)(peer, "Peer not found.", {
       F: __dxlog_file14,
-      L: 114,
+      L: 170,
       S: this,
       A: [
         "peer",
@@ -2842,7 +2925,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo.NetworkAdapter
     return new import_codec_protobuf2.Stream(({ next, close }) => {
       (0, import_invariant10.invariant)(!this._peers.has(peerId), "Peer already connected.", {
         F: __dxlog_file14,
-        L: 132,
+        L: 188,
         S: this,
         A: [
           "!this._peers.has(peerId)",
@@ -2864,19 +2947,35 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo.NetworkAdapter
           });
         }
       });
-      this.emit("peer-candidate", {
-        peerId
-      });
+      this._connected.wait({
+        timeout: 1e3
+      }).then(() => {
+        this.emit("peer-candidate", {
+          peerMetadata: {},
+          peerId
+        });
+      }).catch((err) => import_log13.log.catch(err, void 0, {
+        F: __dxlog_file14,
+        L: 213,
+        S: this,
+        C: (f, a) => f(...a)
+      }));
     });
   }
   async sendSyncMessage({ id, syncMessage }) {
+    await this._connected.wait({
+      timeout: 1e3
+    });
     const message = import_automerge_repo.cbor.decode(syncMessage);
     this.emit("message", message);
   }
-  getHostInfo() {
+  async getHostInfo() {
+    await this._connected.wait({
+      timeout: 1e3
+    });
     (0, import_invariant10.invariant)(this.peerId, "Peer id not set.", {
       F: __dxlog_file14,
-      L: 161,
+      L: 225,
       S: this,
       A: [
         "this.peerId",
@@ -2912,7 +3011,7 @@ var MeshNetworkAdapter = class extends import_automerge_repo.NetworkAdapter {
     const extension = this._extensions.get(receiverId);
     (0, import_invariant10.invariant)(extension, "Extension not found.", {
       F: __dxlog_file14,
-      L: 196,
+      L: 260,
       S: this,
       A: [
         "extension",
@@ -2923,7 +3022,7 @@ var MeshNetworkAdapter = class extends import_automerge_repo.NetworkAdapter {
       payload: import_automerge_repo.cbor.encode(message)
     }).catch((err) => import_log13.log.catch(err, void 0, {
       F: __dxlog_file14,
-      L: 197,
+      L: 261,
       S: this,
       C: (f, a) => f(...a)
     }));
@@ -2933,7 +3032,7 @@ var MeshNetworkAdapter = class extends import_automerge_repo.NetworkAdapter {
   createExtension() {
     (0, import_invariant10.invariant)(this.peerId, "Peer id not set.", {
       F: __dxlog_file14,
-      L: 205,
+      L: 269,
       S: this,
       A: [
         "this.peerId",
@@ -2944,13 +3043,17 @@ var MeshNetworkAdapter = class extends import_automerge_repo.NetworkAdapter {
     const extension = new import_teleport_extension_automerge_replicator.AutomergeReplicator({
       peerId: this.peerId
     }, {
-      onStartReplication: async (info) => {
+      onStartReplication: async (info, remotePeerId) => {
         if (this._extensions.has(info.id)) {
           return;
         }
         peerInfo = info;
         this._extensions.set(info.id, extension);
         this.emit("peer-candidate", {
+          // TODO(mykola): Hack, stop abusing `peerMetadata` field.
+          peerMetadata: {
+            dxos_deviceKey: remotePeerId.toHex()
+          },
           peerId: info.id
         });
       },
@@ -2975,8 +3078,12 @@ var AutomergeStorageAdapter = class extends import_automerge_repo.StorageAdapter
   constructor(_directory) {
     super();
     this._directory = _directory;
+    this._state = "opened";
   }
   async load(key) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     const { size } = await file.stat();
@@ -2987,6 +3094,9 @@ var AutomergeStorageAdapter = class extends import_automerge_repo.StorageAdapter
     return (0, import_util10.bufferToArray)(buffer);
   }
   async save(key, data) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     await file.write(0, (0, import_util10.arrayToBuffer)(data));
@@ -2994,11 +3104,17 @@ var AutomergeStorageAdapter = class extends import_automerge_repo.StorageAdapter
     await file.flush?.();
   }
   async remove(key) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     await file.destroy();
   }
   async loadRange(keyPrefix) {
+    if (this._state !== "opened") {
+      return [];
+    }
     const filename = this._getFilename(keyPrefix);
     const entries = await this._directory.list();
     return Promise.all(entries.filter((entry) => entry.startsWith(filename)).map(async (entry) => {
@@ -3012,6 +3128,9 @@ var AutomergeStorageAdapter = class extends import_automerge_repo.StorageAdapter
     }));
   }
   async removeRange(keyPrefix) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(keyPrefix);
     const entries = await this._directory.list();
     await Promise.all(entries.filter((entry) => entry.startsWith(filename)).map(async (entry) => {
@@ -3019,6 +3138,9 @@ var AutomergeStorageAdapter = class extends import_automerge_repo.StorageAdapter
       await file.destroy();
     }));
   }
+  async close() {
+    this._state = "closed";
+  }
   _getFilename(key) {
     return key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-");
   }
@@ -3054,4 +3176,4 @@ var AutomergeStorageAdapter = class extends import_automerge_repo.StorageAdapter
   startAfter,
   valueEncoding
 });
-//# sourceMappingURL=chunk-GJQNRSA3.cjs.map
+//# sourceMappingURL=chunk-WGNVVL2H.cjs.map